r 



PATENT ABSTRACTS OF JAPAN 



(1 DPublication number : 10-2751 14 

(43)Date of publication of application : 13.10.1998 



(51)Int.CI. 


G06F 12/14 
G06F 12/00 
G06F 15/00 




(21)Application number : 09-080909 


(71)Applicant : 


FUJITSU LTD 


(22)Date of filing : 31 .03.1 997 


(72)Inventor : 


ISOYAMA TOMOHIRO 




SHIBUEYUJl 



(54) CONTENT SECURITY METHOD OF INTERNET AND SYSTEM THEREFOR 
(57)Abstract: 

PROBLEM TO BE SOLVED: To prevent a user who is not allowed to gain 
access to access limited contents by providing the limited contents in a 
directory other than service directories on a server and permitting a user 
who is allowed to gain access to access the limited contents. 
SOLUTION: A parameter judging means 6 checks whether or not a user 
sent from a user terminal 10 is present and whether or not a password is 
correct according to data stored previously in a data base provided in the 
directory 3 other than the service directories 2 on the server 1. When it is 
judged that the user is permitted to access the limited contents B, an 
access means 7 accesses the initial HTML page (e.g. menu page) of the 
limited contents B set previously corresponding to parameters, sends the 
initial HTML page similariy to a password page, and displays it on a display 
device 13. 
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CLAIMS 



[Claim(s)] 

[Claim 1] When a user prepares on a server the service directory which can be perused freely and gives a specific parameter 
from a user terminal In the contents security approach of the Internet that the access permission to the limited contents of the- 
specified use corresponding to the above-mentioned parameter is given among the contents prepared in the above-mentioned 
service directory The above-mentioned limited contents are prepared in other directories other than the service directory on the 
above-mentioned server. The contents security approach of the Internet characterized by accessing the above-mentioned 
limited contents when it is judged that it is access [ user / by whom the above-mentioned access permission was given ]. 
[Claim 2] When a user prepares on a server the service directory which can be perused freely and gives a specific parameter 
from a user terminal In the contents security system of the Internet by which the access permission to the limited contents of 
the specified use corresponding to the above-mentioned parameter is given among the contents prepared in the above- 
mentioned service directory While being prepared in the above-mentioned limited contents with which other directories other 
than the service directory on the above-mentioned server were equipped, and the service directory on the above-mentioned 
server The contents security system of the Internet characterized by having an access means to access the above-mentioned 
limited contents when it is judged that it is access [ user / by whom the above-mentioned access permission was given ]. 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Industrial Application] This invention relates to the contents security approach and system of the Internet which are used in the 

Internet system. 

[0002] 

[Description of the Prior Art] Now, the Internet system by which many and unspecified users connected through the network 
stretched and plotted all over the worid can peruse freely the contents created on the server spreads, and the service only for a 
specific user is also increasing in it. This service manages user ID, a password, etc.. and when it is judged that he Is the specific 
user by whom authorization of access was given with the password check, it enables it to peruse the limited contents created for 
the specific user. Hereafter, this conventional security system is explained based on d rawing 4 . 

[0003] On the server 31 used in the Internet system, the service directory 32 which can be freely perused through a network 34 
from a user terminal 33 by the browser which is a browser is formed, and the release contents A by which release is carried out. 
the above-mentioned limited contents B. etc. are edited into this service directory 32. 

[0004] When perusing the HTML page of the release contents A from the above-mentioned user terminal 33, it can access and 
peruse by choosing and performing the link which carried out the direct input of the URL which is the server address of the 
HTML page made into the object from the above-mentioned browser, and the address in a server, or was prepared in the HTML 
page under present access. 

[0005] Moreover, when perusing the HTML page of the above-mentioned limited contents B from the above-mentioned user 
terminal 33, the HTML page (henceforth a password page) which enters user ID; a password, etc. like the case of the above- 
mentioned release contents A is displayed. Next, when user ID and a password were entered from this password page and it is 
judged based on the data of the database which it had beforehand on the server that whether the user ID inputted as mentioned 
above existing and a password are the users by whom the check of the right etc, was performed and the access permission to 
the above-mentioned limited contents B was given, these limited contents B can be accessed and it can peruse. 
[0006] However, the contents generally edited into the above-mentioned service directory 32 on a server 31 can be accessed 
regardless of distinction of the release contents A. the limited contents B. etc. by carrying out the direct input of the URL of 
these contents on the above-mentioned browser. Therefore, with the above conventional security, when the above-mentioned 
password page establishes a link in the release contents A etc. or the limited contents B make URL of itself secret to carrying 
out [ exhibit / direct URL ], it has prevented being accessed by the above-mentioned limited contents B without passing through 
the above-mentioned password page. 
[0007] 

[Problem(s) to be Solved by the Invention] With the above conventional security, if known, the location, i.e.. URL, of the above- 
mentioned limited contents B, even if it is the user by whom the access permission is not given, access to the above-mentioned 
limited contents B can be performed by carrying out the direct input of this URL on the above-mentioned. browser. 
[0008] Therefore, although URL of the above-mentioned limited contents B is made secret For example, when URL of release 
and the limited contents B is alike From URL of the release contents A, the user by whom the access permission is not given 
guesses URL of the above-mentioned limited contents B. and inputs, or Moreover, it may happen that will input URL of the 
above-mentioned limited contents B by chance, and URL of the above-mentioned limited contents B will be known or to use 
URL of the above-mentioned limited contents B which could be known before, after the user who had the access permission 
before loses rating. 

[0009] With the conventional security, it was not able to prevent thoroughly being accessed by the user by whom the access 
permission is not given to the above-mentioned limited contents B as mentioned above. 

[0010] This invention is proposed in view of the above-mentioned situation, only the user by whom the access permission to the 
above-mentioned limited contents was given can access it to these limited contents, and the user by whom the access 
permission is not given aims at offering the contents security approach and system of the Internet which can prevent accessing 
to these limited contents certainly. 
[0011] 

[Means for Solving the Problem] This invention has adopted the following means, in order to attain the above-mentioned object 
Namely, when a user forms the service directory 2 which can be perused freely on a server 1 and gives a specific parameter from 
a user terminal 10 In the contents security approach of the Internet that the access permission to the limited contents B of the 
specified use corresponding to the above-mentioned parameter is given among the contents prep5sred in the above-mentioned 
service directory 2 The above-mentioned limited contents B were formed in other directories 3 other than service directory 2 on 
the above-mentioned server 1, and when it is judged that it is access [ user / by whom the above-mentioned access permission 
was given ], a means to access the above-mentioned limited contents B is adopted. 

[0012] While specifically being prepared in the sen/ice directory 2 on the above-mentioned limited contents B with which other 
directories 3 other than service directory 2 on the above-mentioned server 1 were equipped, and the above-mentioned server 1. 
when it is judged that it is access [ user / by whom the above-mentioned access permission was given ], it realizes by having an 
access means to access the above-mentioned limited contents B. 
[0013] 

[Embodiment of the Invention] PrawingJ is the conceptual diagram of the network where the contents security system of the 



Internet of this invention is applied, drawing 2 is the block diagram of one example of the contents security system of the 
Internet of this invention, and drawing 3 is flow drawing showing the procedure in the above-mentioned system, and it explains it 
based on drawing below. 

[0014] In this example, the release contents A which contain a password page in the service directory 2 on a server 1. the 
parameter decision means 6, and the access means 7 are formed for the limited contents B in other directories 3 other than 
service directory 2. 

[0015] When perusing the above-mentioned limited contents B on the server 1 connected through the network 20 from the user 
terminal 10. the above-mentioned password page first prepared in the above-mentioned service directory 2 is displayed. 
[ whether this procedure inputs URL of the direct above-mentioned password page from on the browser started by the control 
means 11 of the above-mentioned user terminal with the input means 14, such as a keyboard of the above-mentioned user 
terminal 10, and a mouse, and ] Or if the link of the above-mentioned password page prepared in the HTML page of the release 
contents A is chosen and performed (Si) URL of the above-mentioned password page is sent to the transceiver means 4 of the 
above-mentioned server 1 from this transceiver means 4 next through a network 20 from the transceiver means 12 of a user 
terminal 10 to a control means 5 based on the server address in this URL (S2). This control means 5 sends the above-mentioned 
password page to the above-mentioned transceiver means 12 of the above-mentioned user terminal 10 through the above- 
mentioned transceiver means 4 and a network 20 based on the address in a server in sent URL. Next, in the above-mentioned 
user terminal 10, the transmitted above-mentioned password page is displayed on the display 13 of the above-mentioned user 
terminal 10 by the above-mentioned browser (S3). 

[0016] And next, if a user gives and enters user ID and a password into this password page as a parameter with the above- 
mentioned input means 14 (S4), it will be transmitted to the above-mentioned control means 5 through the transceiver means 4 
of the above-mentioned network 20 and the above-mentioned server 1 from the above-mentioned transceiver means 12 like 
URL of the above-mentioned password page, and the parameter decision means 6 will be started by this control means 5, With 
this parameter decision means 6. the above-mentioned user ID transmitted to the database formed in other directories 3 other 
than the above-mentioned service directory 2 on a server 1 from the user terminal 10 based on the data stored beforehand 
exists, or the above-mentioned password is performing that check (S5) of the right. 

[0017] Consequently, when it is judged that he is the user by whom the access permission to the above-mentioned limited 
contents B was given, it accesses to the initial HTML pages (for example, menu page shown in drawing 4 ) of the limited contents 
B to which the access means 7 was beforehand set corresponding to the above-mentioned parameter (S6), this initial HTML 
page is transmitted to the above-mentioned user terminal 10 like the above-mentioned password page, and it is made to display 
on the above-mentioned display 13 (S7). at least one display [ degree ] items 21 (for example, item of the HTML page which can 
be displayed on a degree on the menu page shown in drawing 4 etc.) hang up over this initial HTML page — having — — a 
user — this — degree screen can be chosen now by directing either of degree display items 21. That is, the assignment of a 
purport of the display HTML name 22 of the full path which indicated the directory of the storing location of this following display 
item to each hiding in the above-mentioned following display item 21 from a user in the format (it not being displayed on a screen 
but stored in the memory of the above-mentioned user terminal 10 etc.) which is not in sight, and being given to it as a 
parameter, and adding to the display HTML name 22 of this full path, and starting the above-mentioned access means 7 is made. 
Degree screen corresponding to degree display item 21 of the specification chosen as mentioned above by this based on 
directions of a user can be displayed. 

[0018] In addition, when it is judged as a result of the above-mentioned check that he is not the user by whom the access 
permission to the above-mentioned limited contents B was given, access to the above-mentioned initial HTML page is not 
performed, but the display of a purport without an access permission is made by the above-mentioned display 13 (S8). 
[0019] next, the above which the user chose — if degree display item 21 is performed (S9) — this — the display HTML name 22 
of the full path of the display [ degree ] item 21 is transmitted to the above-mentioned control means 5 like URL of the above- 
mentioned password page as a parameter, and the above-mentioned access means 7 is started. Degree display chosen by the 
display HTML name 22 of the full path which is the transmitted parameter is accessed (S10). this following display is transmitted 
to a user terminal 10 like the above-mentioned password page, and it is expressed to the above-mentioned display 13 as this 
access means 7 (S11). access to degree display of the limited contents B after this — the above — it is carried out like the 
access method to degree display. 

[0020] Moreover, by choosing and performing the link established in the screen under access in the above-mentioned limited 
contents B even if it was a user under utilization at which event with the above-mentioned input means 14. or inputting URL of 
the direct release contents A with the above-mentioned input means 14 from on the above-mentioned browser, access of the 
above-mentioned limited contents B can be ended, and it can move to access of the release contents A. 
[0021] 

[Effect of the Invention] According to the contents security approach and system of the Internet of this invention, access from 
the user by whom the access permission to these limited contents is not given can be certainly prevented by having prepared 
limited contents in other directories other than the service directory on a server, and having formed an access means to access 
the above-mentioned limited contents when it is judged that it is access [ user / by whom the access permission was given ] in 
the sep/ice directory on the above-mentioned server. 
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DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the conceptual diagram of the network where this invention is applied. 

[Drawing 2] It is the block diagram of one example of this invention. 

[Drawing 3] It is flow drawing of one example of this invention. 

[Drawing 4] It is the example of a screen of one example of this invention. 

tei:?.wLri£-5] it is the conventional system concept drawing. 

[Description of Notations] 

1 31, Server 

2 32 Service Directory 

3 Other Directories 

4 12 Transceiver means 

5 11 Control means 

6 Parameter Decision Means 

7 Access Means 

10 33 User terminal 

13 Display 

20 34 Network 

A Release contents 

B Limited contents 
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